Privacy policy

The short version

We collect what we need to provide the service and bill you for it, we don't sell it, and we keep it in South Africa. You can ask us what we hold about you and we'll tell you.

Who is responsible

Zephyr Telecomms is the responsible party (under POPIA) and data controller (under GDPR) for the information described here. Contact noc@zephyrtelecomms.com with any request.

What we collect

• Account information — name, company, email, phone, billing address, and the regulatory documentation some numbering requires.
• Usage records — call detail records and message records, including numbers, timestamps, duration and cost. We need these to route, bill and troubleshoot.
• Call recordings, where you have enabled recording. These belong to you; we hold them on your behalf.
• Technical data — IP addresses, signalling data and logs, used for security, fraud detection and fault diagnosis.
• Correspondence — what you send us when you contact us.

Why we hold it

• To provide the service you've asked for — this is contractual necessity.
• To bill you accurately and meet our accounting obligations.
• To detect and prevent fraud, including toll fraud, which is a legitimate interest and protects you too.
• To meet legal and regulatory obligations, including record-keeping requirements that apply to licensed operators.
• To respond when you contact us.

How long we keep it

• Call and message records — retained for the period required by regulation and for billing dispute resolution, then deleted.
• Call recordings — retained per the policy you configure, which you control per tenant. Deletion is logged.
• Account records — kept while the account is active and for the period afterwards that tax and company law requires.
• Enquiries — kept only as long as needed to deal with them.

Where it lives

Our core network and data storage are in South Africa. Call recordings and CDR data stay in-country and are subject to South African law. Where a service genuinely requires processing elsewhere, we'll tell you before you use it.

Who else sees it

• Carriers and networks — routing a call necessarily discloses the numbers involved to the networks carrying it. That's how telephony works.
• Regulators and law enforcement, where we're legally compelled. We require lawful process and don't volunteer data.
• Service providers who help us operate, bound by contract to protect it.
• We do not sell personal information, and we do not share it for advertising.

Your rights

• Ask what we hold about you and receive a copy.
• Ask us to correct anything inaccurate.
• Ask us to delete information, where we're not legally required to keep it.
• Object to processing based on legitimate interest.
• Complain to the Information Regulator of South Africa, or your local supervisory authority under GDPR.

Email noc@zephyrtelecomms.com and we'll respond within the statutory period.

If you're our customer's customer

Where a business uses Zephyr to communicate with you, that business decides what to collect and why — they are the responsible party and we are the operator processing on their instruction. Direct your request to them; we'll support them in answering it.

Security

• Encryption in transit for platform access and API traffic.
• Access control and audit logging on systems holding personal information.
• Recording integrity checks so tampering is detectable.
• Fraud and anomaly detection running in the routing path.

Cookies

The website uses only what's necessary to serve pages. We don't run advertising trackers or third-party profiling on it.